===================================================== BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 kernel/smp.c:535 __flush_smp_call_function_queue+0x362/0x18e0 kernel/smp.c:535 generic_smp_call_function_single_interrupt+0x1c/0x30 kernel/smp.c:463 __sysvec_call_function_single+0x4b/0x3e0 arch/x86/kernel/smp.c:271 instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline] sysvec_call_function_single+0x7c/0x90 arch/x86/kernel/smp.c:266 asm_sysvec_call_function_single+0x1f/0x30 arch/x86/include/asm/idtentry.h:704 smap_save mm/kmsan/instrumentation.c:93 [inline] get_shadow_origin_ptr mm/kmsan/instrumentation.c:35 [inline] __msan_metadata_ptr_for_load_4+0x14/0x40 mm/kmsan/instrumentation.c:93 stack_trace_consume_entry+0x9e/0x220 kernel/stacktrace.c:89 arch_stack_walk+0x18e/0x280 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0xc2/0x100 kernel/stacktrace.c:122 kmsan_save_stack_with_flags mm/kmsan/core.c:73 [inline] kmsan_internal_poison_memory+0x4a/0x90 mm/kmsan/core.c:57 kmsan_slab_free+0xce/0x140 mm/kmsan/hooks.c:87 slab_free_hook mm/slub.c:2611 [inline] slab_free mm/slub.c:6165 [inline] kfree+0x2e4/0x1130 mm/slub.c:6483 skb_kfree_head net/core/skbuff.c:1089 [inline] skb_free_head net/core/skbuff.c:1101 [inline] skb_release_data+0x1061/0x11b0 net/core/skbuff.c:1128 skb_release_all net/core/skbuff.c:1203 [inline] __kfree_skb+0x6b/0x260 net/core/skbuff.c:1217 sk_skb_reason_drop+0x126/0x500 net/core/skbuff.c:1255 ipvlan_queue_xmit+0xade/0x22c0 drivers/net/ipvlan/ipvlan_core.c:-1 ipvlan_start_xmit+0x58/0x220 drivers/net/ipvlan/ipvlan_main.c:226 __netdev_start_xmit include/linux/netdevice.h:5325 [inline] netdev_start_xmit include/linux/netdevice.h:5334 [inline] xmit_one net/core/dev.c:3888 [inline] dev_hard_start_xmit+0x24e/0xad0 net/core/dev.c:3904 __dev_queue_xmit+0x3412/0x5980 net/core/dev.c:4854 dev_queue_xmit include/linux/netdevice.h:3385 [inline] batadv_send_skb_packet+0x53e/0x840 net/batman-adv/send.c:100 batadv_send_broadcast_skb+0x3d/0x50 net/batman-adv/send.c:121 batadv_iv_ogm_send_to_if net/batman-adv/bat_iv_ogm.c:391 [inline] batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:419 [inline] batadv_iv_send_outstanding_bat_ogm_packet+0xb1b/0xde0 net/batman-adv/bat_iv_ogm.c:1700 process_one_work kernel/workqueue.c:3276 [inline] process_scheduled_works+0xb82/0x1e80 kernel/workqueue.c:3359 worker_thread+0xee4/0x1590 kernel/workqueue.c:3440 kthread+0x53f/0x600 kernel/kthread.c:436 ret_from_fork+0x20f/0x910 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Local variable reuse.i created at: mas_wr_node_store lib/maple_tree.c:3495 [inline] mas_wr_store_entry+0x14bd/0x96d0 lib/maple_tree.c:3764 mas_store_prealloc+0x1834/0x1e60 lib/maple_tree.c:5169 CPU: 1 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet =====================================================